Clipboard Ai MCP Server

This clipboard MCP server has critical security vulnerabilities that prevent safe deployment. The code depends on an external auth_middleware module from a non-standard path (~/clawd/meok-labs-engine/shared) that is not provided, bundled, or documented, making authentication completely unverifiable. Additionally, all clipboard operations accept an api_key parameter but do not validate it securely—the check_access function is a black box. The server also adds a non-standard path to sys.path pointing to a user's home directory, creating path injection risks. While the core clipboard logic is benign, these authentication and dependency issues are critical flaws for a server handling user data. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.